Merge pull request #8672 from backstage/rugvip/noframe

app-backend: disallow all iframe embedding of the app
2021-12-29 12:54:43 +01:00
parent 2edb27e8e5 9d9cfc1b8a
commit a0004d3451
3 changed files with 9 additions and 0 deletions
@@ -0,0 +1,5 @@
+---
+'@backstage/plugin-app-backend': patch
+---
+
+Set `X-Frame-Options: deny` rather than the default `sameorigin` for all content served by the `app-backend`.`